Ignore the smallprint

TA!Smallprint!HTML

09 September 2011

Description

Using very big and very small letters where the latter are likely to be ignored and the former contain the actual message. See also Whiter Shade of Pale.

Submitted by Natalia Zablotskaya (Kaspersky Labs); more at this SecureList blog post.

Example

Cxaaabbbb Hdeeeffff Ehhhhiiij Akkllllmm Pmnnnnooo

Looks like:

Cxaaabbbb Hdeeeffff Ehhhhiiij Akkllllmm Pmnnnnooo
Prrrsssss Htttuuuvv Avvvwwwwx Raabbbbbb Mccddddee Affgggghh Chhiiiijj Ykkkkklll

The text as seen in spam emails was a link to a website vulnerable to SQL injection. However, nothing is pulled out of a database; instead, using a SELECT query, code is inserted that causes the user to be redirected to a pharmacy website.

VBSpam


	Similar entries A small area Absolute Zero Animated Noise Big Header-ed Catch a Wave Chop GUI Control Freak Doing The Twist Excel Sent Floatation Device Ignore the smallprint In the background No Whitespace, No Cry Pretty Darn Fancy Pump up the volume Script Writer Slice and Dice Strip Mining The Big Picture The Matrix The Office The Sieve The Small Picture Times Square Whiter Shade of Pale See also Spammers' Compendium SPUTR Resources